Ensure Exec Timeout for Console Sessions is set for less than 10

MittelStufe 1Automatisiertcisco-nxos

Beschreibung

Verify device is configured to automatically disconnect console sessions after a defined maximum session time, set in minutes. This prevents unauthorized users from misusing abandoned sessions. For example, if the network administrator disconnects leaving a console session open, that session will remain open (in the same state and privilege level) for the next person who connects a ... Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).

So wird geprüft

Prüfmethode: Konfigurationsmuster

Muster: (?m)^line console[^\n]*\n(?:[ \t][^\n]*\n)*?[ \t]+exec-timeout (?:[1-9]|10)[ \t\r]*$

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

line console exec-timeout 10

Eigenschaften

Betriebssysteme: Beliebig
Tags: cisco-nxosnetworkntp
Referenz: CIS Cisco NX-OS Benchmark v1.2.0 - 1.2.4 Ensure Exec Timeout for Console Sessions is set for less than 10

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target cisco-nxos